Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/A2EF68E66EAD11EC8796A251C4F9AE02.roa
File: A2EF68E66EAD11EC8796A251C4F9AE02.roa (raw, json)
Hash identifier: hiz98+Tla2jui/7o4KW1a6oKm5a+tUfazFi0UQ7ozaI=
Subject key identifier: C8:23:63:97:30:61:67:CE:4B:32:E8:32:9A:8C:D9:3E:4D:29:11:15
Certificate issuer: /CN=A91D82F4/serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E
Certificate serial: 06A0
Authority key identifier: 4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/A2EF68E66EAD11EC8796A251C4F9AE02.roa
Signing time: Thu 16 Jan 2025 21:51:14 +0000
ROA not before: Thu 16 Jan 2025 21:51:14 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 138623
IP address blocks: 103.174.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1696 (0x6a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D82F4
Validity
Not Before: Jan 16 21:51:14 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67897f52-5a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2f:d1:cb:fa:53:c0:59:ef:d6:c1:51:8d:41:
cb:49:42:dd:60:c2:c5:e4:e8:f7:5c:92:8d:a0:ac:
5a:5d:69:27:ed:c2:a7:68:f4:5d:ea:5c:a7:91:68:
b8:b9:71:61:a8:7e:73:11:e2:e5:ab:4f:4d:86:ef:
1d:db:65:98:9a:72:ad:b8:23:1b:7e:a1:bf:73:51:
6f:d1:4e:c8:95:de:1c:c4:ee:8d:9c:28:88:a3:2b:
05:c2:85:9f:c5:c5:3c:49:b0:a2:03:5e:c3:e8:65:
e2:a6:04:ca:c7:a6:96:55:3c:8e:86:04:d1:30:89:
ff:74:f3:72:92:fb:80:52:fc:8a:ff:78:5d:d1:a0:
0a:55:75:78:a6:70:61:72:69:7f:80:e4:94:7b:1d:
35:54:85:7e:75:72:eb:ef:53:57:17:f3:f5:1a:78:
f6:c0:37:d4:af:7d:d3:b0:90:f2:51:99:d8:f5:0c:
95:bd:80:cb:21:5c:f9:1c:06:b0:e5:ae:12:96:de:
ac:a2:ea:f5:da:f0:4c:ba:11:a0:a1:ec:16:36:1a:
5c:13:46:8a:0d:8f:73:08:5f:e8:03:1f:17:16:bd:
d6:b5:c8:8a:cb:ce:7c:08:25:e0:06:94:2f:b2:f7:
e3:0e:16:4c:bc:26:fb:9a:36:82:f3:d7:99:a3:67:
4d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:23:63:97:30:61:67:CE:4B:32:E8:32:9A:8C:D9:3E:4D:29:11:15
X509v3 Authority Key Identifier:
keyid:4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/A2EF68E66EAD11EC8796A251C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.20.0/24
Signature Algorithm: sha256WithRSAEncryption
65:51:a5:ff:c9:8d:f8:4a:46:2e:af:33:d4:17:64:1c:c9:32:
1e:86:2e:e0:1d:d5:10:fd:39:66:02:fe:5d:72:62:15:2e:4c:
6b:0c:49:1a:c8:38:13:3c:e7:25:57:e2:b7:ad:2a:63:46:b8:
f9:63:64:f4:de:54:98:36:6d:73:06:cf:e7:04:04:d0:72:f9:
2e:cf:4c:ac:9c:f9:34:96:34:de:f9:2b:c9:10:f6:52:77:17:
d8:bd:ae:ff:2a:f5:d8:28:85:4c:66:77:b6:f9:38:44:ff:d6:
91:6d:f5:80:01:e0:a8:42:bd:1c:78:77:8a:e4:36:f5:2e:21:
90:28:50:b2:ca:72:51:a3:42:13:df:f7:bf:77:00:fa:b5:b0:
8e:0d:ef:8b:b9:e6:68:39:bc:81:87:8b:5a:ed:f3:af:95:da:
1a:ab:76:3f:b8:a6:79:fa:d0:78:83:36:4a:a5:90:69:5a:84:
4c:ce:8d:ca:e9:73:75:f1:7f:3e:69:a6:1f:88:24:86:06:52:
b5:5e:10:00:73:18:75:a9:a9:63:37:7a:17:d5:54:a3:f5:c5:
07:32:99:78:a0:6e:e4:d0:6d:f6:d2:2c:9c:70:cb:f4:b7:0f:
b5:fb:9e:d1:a7:0c:84:a8:be:9a:74:d6:43:ae:44:79:9b:f6:
5e:2b:0a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:55 2025 by rpki-client